Log in Scan Now

All security reports

NVD security advisoryHigh

High advisory for Shop manager PHP Object Injection in Fin

CVE-2026-118074 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Shop manager PHP Object Injection in FinPHP ecosystem

Advisory overview

Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.

Related references

https://patchstack.com/database/wordpress/plugin/finale-woocommerce-sales-countdown-timer-discount/vulnerability/wordpress-finale-lite-plugin-2-21-0-php-object-injection-vulnerability?_s_id=cve

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account

Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. | Security report | Cevnitra